The institute is under pressure to publish separate guidance on protecting critical software and testing source code.

The CDO is organizing work around eight priority data domains, and the department is looking to pilot a CMMC approach with its vendors.

President-elect Joe Biden's first-ever cyber czar could prove instrumental in crafting a national cyber R&D strategy and coordinating dispersed efforts to secure the supply chain.

The department has begun working with vendors to ensure they understand required supply chain controls and are using components and equipment they're comfortable with.

2GIT, STARS III and other governmentwide acquisition contracts are all part of the more "proactive approach" to protecting federal information systems, say officials.

The interim final rule establishes how the Federal Acquisition Security Council will operate.